$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae4b0e6-dd35-492c-8374-ca57f69a7250/36441e7a-9ad8-3849-8565-f82dc9ec43b5.roa File: 36441e7a-9ad8-3849-8565-f82dc9ec43b5.roa (raw, json) Hash identifier: OSyPBagCiWQC6zzxwbLSE6o19xveaN/49qZ7l47/FF4= Subject key identifier: BB:34:07:4C:19:8C:14:92:B2:B0:14:A0:30:CB:76:72:25:00:EE:64 Certificate issuer: /CN=aae4b0e6-dd35-492c-8374-ca57f69a7250 Certificate serial: 010D0C9F4328584B9566900A285B5AC25051DCC0 Authority key identifier: 00:F5:73:B8:B8:00:39:E1:4B:33:3D:49:C0:04:A2:15:06:01:AC:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae4b0e6-dd35-492c-8374-ca57f69a7250.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae4b0e6-dd35-492c-8374-ca57f69a7250/36441e7a-9ad8-3849-8565-f82dc9ec43b5.roa Signing time: Mon 20 Oct 2025 10:49:48 +0000 ROA not before: Mon 20 Oct 2025 10:49:48 +0000 ROA not after: Sun 18 Jan 2026 11:49:48 +0000 asID: 2914 IP address blocks: 162.222.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae4b0e6-dd35-492c-8374-ca57f69a7250/aae4b0e6-dd35-492c-8374-ca57f69a7250.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae4b0e6-dd35-492c-8374-ca57f69a7250/aae4b0e6-dd35-492c-8374-ca57f69a7250.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae4b0e6-dd35-492c-8374-ca57f69a7250.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:66:90:0a:28:5b:5a:c2:50:51:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae4b0e6-dd35-492c-8374-ca57f69a7250 Validity Not Before: Oct 20 10:49:48 2025 GMT Not After : Jan 18 11:49:48 2026 GMT Subject: CN=ac165ad9-b690-430e-9fc3-dbd8ddc01655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:58:65:1f:8e:e1:f6:55:ac:44:72:4c:2c:93: 7d:3a:2e:ed:57:03:90:e8:6c:e5:c0:0a:7c:a8:a3: f1:bc:2e:25:73:7b:38:11:08:96:25:0a:05:9c:99: 07:c8:8c:33:2b:95:32:0f:67:c0:9b:c5:52:87:55: d0:18:7e:c2:9c:e4:0e:21:6e:4e:d2:fa:a6:d9:3d: af:05:b4:c5:ab:67:a5:40:88:98:0b:31:c5:d6:da: 5a:08:fd:05:21:64:b3:18:b5:b2:00:59:ab:d7:8c: 4d:76:b7:39:d2:50:3b:6d:87:4f:4a:42:dc:84:77: 0f:a9:81:07:f0:ef:a5:78:f1:b7:b5:27:ca:5b:99: e2:f4:80:79:7b:d8:03:fa:29:a7:11:23:98:ed:ee: d7:e6:48:5e:f2:61:84:c3:d2:ac:b7:15:8f:5e:f6: c0:c2:3a:82:8e:d9:cb:79:c7:a6:19:8b:4b:76:d1: 29:45:57:f7:ab:95:b7:3d:d0:b0:02:57:3d:01:8c: 4b:65:91:a6:da:93:41:8a:f1:29:27:ba:55:13:16: 9c:3d:01:25:64:19:bf:70:ac:59:8d:fe:10:70:13: 3a:cd:f6:39:11:2d:ac:c2:12:e0:bb:7d:ed:a1:79: fc:c5:8b:29:7e:87:f1:84:11:85:cf:95:12:41:da: 66:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:34:07:4C:19:8C:14:92:B2:B0:14:A0:30:CB:76:72:25:00:EE:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae4b0e6-dd35-492c-8374-ca57f69a7250/36441e7a-9ad8-3849-8565-f82dc9ec43b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae4b0e6-dd35-492c-8374-ca57f69a7250/aae4b0e6-dd35-492c-8374-ca57f69a7250.crl X509v3 Authority Key Identifier: keyid:00:F5:73:B8:B8:00:39:E1:4B:33:3D:49:C0:04:A2:15:06:01:AC:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae4b0e6-dd35-492c-8374-ca57f69a7250.cer sbgp-ipAddrBlock: critical IPv4: 162.222.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:e6:4f:df:4b:6d:78:5f:f3:e3:56:b2:71:0d:09:0d:e7:1c: 8e:e0:2b:15:45:5c:f7:8e:4b:00:2a:fa:f5:7f:d1:30:da:d4: 2a:55:68:b4:19:6d:05:5f:37:ba:a9:41:23:91:38:9a:11:99: df:eb:79:83:09:fc:f0:1d:9f:62:e8:6b:2f:44:f7:10:c5:e9: 24:48:ed:31:34:5c:ba:9f:35:c3:dd:42:6d:b7:32:da:88:68: 49:29:d5:6f:11:b6:fe:2a:84:b5:f2:74:f8:07:11:a2:de:4e: 8d:1d:15:6c:97:b8:1e:91:db:09:d1:0b:3f:95:d6:7e:76:ef: 66:f7:28:4e:da:e5:e3:08:e4:65:14:44:c3:fb:03:0d:0f:bc: 24:43:72:fe:03:58:92:a0:01:f7:e2:01:16:7e:6c:8c:6b:2f: ef:9c:96:18:8a:ac:3e:88:25:1b:12:c2:08:90:b6:fc:c9:01: 8a:81:2a:77:78:b1:32:e0:ab:c4:ab:a5:df:0e:33:dc:62:a8: 52:7f:72:03:7d:67:7a:ec:77:84:6d:21:ae:76:78:88:ad:47: a8:0d:1a:78:b7:21:4d:a8:4a:f6:62:3f:0d:f6:61:97:25:0d: db:75:63:d1:bf:11:bd:74:c7:bc:a0:73:72:aa:de:69:08:1a: 80:8b:76:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVZpAKKFtawlBR3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNGIwZTYtZGQzNS00OTJjLTgzNzQtY2E1N2Y2OWE3 MjUwMB4XDTI1MTAyMDEwNDk0OFoXDTI2MDExODExNDk0OFowLzEtMCsGA1UEAxMk YWMxNjVhZDktYjY5MC00MzBlLTlmYzMtZGJkOGRkYzAxNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1hlH47h9lWsRHJMLJN9Oi7tVwOQ6GzlwAp8 qKPxvC4lc3s4EQiWJQoFnJkHyIwzK5UyD2fAm8VSh1XQGH7CnOQOIW5O0vqm2T2v BbTFq2elQIiYCzHF1tpaCP0FIWSzGLWyAFmr14xNdrc50lA7bYdPSkLchHcPqYEH 8O+lePG3tSfKW5ni9IB5e9gD+imnESOY7e7X5khe8mGEw9KstxWPXvbAwjqCjtnL ecemGYtLdtEpRVf3q5W3PdCwAlc9AYxLZZGm2pNBivEpJ7pVExacPQElZBm/cKxZ jf4QcBM6zfY5ES2swhLgu33toXn8xYspfofxhBGFz5USQdpmGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs0B0wZjBSSsrAUoDDLdnIlAO5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWU0 YjBlNi1kZDM1LTQ5MmMtODM3NC1jYTU3ZjY5YTcyNTAvMzY0NDFlN2EtOWFkOC0z ODQ5LTg1NjUtZjgyZGM5ZWM0M2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFlNGIwZTYtZGQzNS00OTJjLTgz NzQtY2E1N2Y2OWE3MjUwL2FhZTRiMGU2LWRkMzUtNDkyYy04Mzc0LWNhNTdmNjlh NzI1MC5jcmwwHwYDVR0jBBgwFoAUAPVzuLgAOeFLMz1JwASiFQYBrM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWU0YjBlNi1kZDM1LTQ5MmMtODM3NC1jYTU3 ZjY5YTcyNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHmT99LbXhf8+NWsnENCQ3nHI7gKxVFXPeOSwAq+vV/0TDa1CpVaLQZ bQVfN7qpQSOROJoRmd/reYMJ/PAdn2Loay9E9xDF6SRI7TE0XLqfNcPdQm23MtqI aEkp1W8Rtv4qhLXydPgHEaLeTo0dFWyXuB6R2wnRCz+V1n5272b3KE7a5eMI5GUU RMP7Aw0PvCRDcv4DWJKgAffiARZ+bIxrL++clhiKrD6IJRsSwgiQtvzJAYqBKnd4 sTLgq8Srpd8OM9xiqFJ/cgN9Z3rsd4RtIa52eIitR6gNGni3IU2oSvZiPw32YZcl Ddt1Y9G/Eb10x7ygc3Kq3mkIGoCLdqY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:46:46 2025 by rpki-client